cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1468
Views
0
Helpful
3
Replies

MACsec vs IPsec/GRE

Jeff Horton
Beginner
Beginner

Does the MACsec sufficiently encrypt data (multicast, .etc) on the Cisco 9000 series switch so that I don't have to worry about deploying GRE/IPsec?

 

Thoughts?

 

 

1 Accepted Solution

Accepted Solutions

Reza Sharifi
Hall of Fame Expert Hall of Fame Expert
Hall of Fame Expert

GRE/IPsec is usually used for connecting multiple sites together over the Internet (WAN connection). On the other hand, MACsec is for host to switch encryption or between switches. So, two different functions.

 

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-6/configuration_guide/sec/b_166_sec_9300_cg/macsec_encryption.html

HTH 

 

View solution in original post

3 Replies 3

Reza Sharifi
Hall of Fame Expert Hall of Fame Expert
Hall of Fame Expert

GRE/IPsec is usually used for connecting multiple sites together over the Internet (WAN connection). On the other hand, MACsec is for host to switch encryption or between switches. So, two different functions.

 

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-6/configuration_guide/sec/b_166_sec_9300_cg/macsec_encryption.html

HTH 

 

So if I read correctly what you are saying, then MACsec would be good for the switch to switch connection and no need for GRE/IPsec?

So if I read correctly what you are saying, then MACsec would be good for the switch to switch connection and no need for GRE/IPsec?

That is correct.

HTH

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers